Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
osvGoogleOSV:CVE-2022-40982
HistoryAug 11, 2023 - 3:15 a.m.

CVE-2022-40982

2023-08-1103:15:14
Google
osv.dev
71
information exposure
microarchitectural state
intel processors
transient execution
local access

CVSS3

6.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

EPSS

0.001

Percentile

35.3%

JSON

Information exposure through microarchitectural state after transient execution in certain vector execution units for some Intel® Processors may allow an authenticated user to potentially enable information disclosure via local access.

References

Related

oraclelinux 8
prion 1
nessus 61
openvas 45
cve 1
ubuntucve 1
alpinelinux 1
debian 5
talosblog 1
cvelist 1
ics 1
f5 1
vulnrichment 1
cloudlinux 1
veracode 1
nvd 1
amazon 1
debiancve 1
osv 22
xen 1
redhatcve 1
fedora 4
chrome 1
redhat 7
rocky 2
citrix 1
cloudfoundry 1
ubuntu 17
thn 2
mageia 3
trellix 2
hp 1
centos 1
oraclelinux
oraclelinux
microcode_ctl security update
2023-08-15 00:00:00
Unbreakable Enterprise kernel-container security update
2023-09-11 00:00:00
microcode_ctl security update
2023-08-15 00:00:00
prion
prion
Information disclosure
2023-08-11 03:15:00
nessus
nessus
Oracle Linux 7 : Unbreakable Enterprise kernel-container (ELSA-2023-12785)
2023-09-11 00:00:00
Oracle Linux 8 : microcode_ctl (ELSA-2023-12723)
2023-08-15 00:00:00
Debian DLA-3524-1 : linux - LTS security update
2023-08-17 00:00:00
openvas
openvas
Missing Linux Kernel mitigations for 'GDS - Gather Data Sampling' hardware vulnerability (Downfall, INTEL-SA-00828)
2023-08-11 00:00:00
Debian: Security Advisory (DLA-3524-1)
2023-08-18 00:00:00
Debian: Security Advisory (DLA-3525-1)
2023-08-18 00:00:00
cve
cve
CVE-2022-40982
2023-08-11 03:15:14
ubuntucve
ubuntucve
CVE-2022-40982
2023-08-08 00:00:00
alpinelinux
alpinelinux
CVE-2022-40982
2023-08-11 03:15:14
debian
debian
[SECURITY] [DLA 3524-1] linux security update
2023-08-10 19:41:46
[SECURITY] [DSA 5475-1] linux security update
2023-08-11 07:57:07
[SECURITY] [DLA 3525-1] linux-5.10 security update
2023-08-11 17:21:05
talosblog
talosblog
Recapping the top stories from Black Hat and DEF CON
2023-08-17 18:00:32
cvelist
cvelist
CVE-2022-40982
2023-08-11 02:37:05
ics
ics
Siemens SIMATIC IPCs
2023-09-14 12:00:00
f5
f5
K000135795: Downfall Attacks CVE-2022-40982
2023-08-09 00:00:00
vulnrichment
vulnrichment
CVE-2022-40982
2023-08-11 02:37:05
cloudlinux
cloudlinux
microcode_ctl: Fix of CVE-2022-40982
2023-08-30 17:12:48
veracode
veracode
Information Disclosure
2023-08-10 23:12:56
nvd
nvd
CVE-2022-40982
2023-08-11 03:15:14
amazon
amazon
Medium: microcode_ctl
2023-08-03 18:10:00
debiancve
debiancve
CVE-2022-40982
2023-08-11 03:15:14
osv
osv
linux - security update
2023-08-10 00:00:00
kernel-devel-6.4.9-1.1 on GA media
2024-06-15 00:00:00
xen-4.17.2_02-1.1 on GA media
2024-06-15 00:00:00
xen
xen
x86/Intel: Gather Data Sampling
2023-08-08 15:53:00
redhatcve
redhatcve
CVE-2022-40982
2023-08-08 17:20:33
fedora
fedora
[SECURITY] Fedora 38 Update: xen-4.17.2-1.fc38
2023-08-16 01:22:32
[SECURITY] Fedora 37 Update: xen-4.16.5-1.fc37
2023-08-27 00:50:59
[SECURITY] Fedora 38 Update: microcode_ctl-2.1-55.1.fc38
2023-08-16 01:22:33
chrome
chrome
Stable Channel Update for ChromeOS / ChromeOS Flex
2023-08-01 00:00:00
redhat
redhat
(RHSA-2024:3319) Important: kernel security update
2024-05-23 07:23:18
(RHSA-2023:7423) Important: kernel security update
2023-11-21 14:52:31
(RHSA-2023:7424) Important: kernel-rt security update
2023-11-21 14:52:34
rocky
rocky
microcode_ctl bug fix and enhancement update
2023-09-19 12:10:01
microcode_ctl bug fix and enhancement update
2023-09-19 12:08:46
citrix
citrix
Citrix Hypervisor Security Bulletin for CVE-2023-20569, CVE-2023-34319 and CVE-2022-40982
2023-08-08 17:07:04
cloudfoundry
cloudfoundry
USN-6286-1: Intel Microcode vulnerabilities | Cloud Foundry
2023-10-05 00:00:00
ubuntu
ubuntu
Intel Microcode vulnerabilities
2023-08-14 00:00:00
Linux kernel (Raspberry Pi) vulnerabilities
2023-09-06 00:00:00
Linux kernel vulnerabilities
2023-08-31 00:00:00
thn
thn
iLeakage: New Safari Exploit Impacts Apple iPhones and Macs with A- and M-Series CPUs
2023-10-26 16:49:00
Collide+Power, Downfall, and Inception: New Side-Channel Attacks Affecting Modern CPUs
2023-08-09 15:39:00
mageia
mageia
Updated microcode packages fix security vulnerabilities
2023-08-23 22:56:41
Updated kernel packages fix security vulnerabilities
2023-08-23 22:56:41
Updated kernel-linus packages fix security vulnerabilities
2023-08-23 22:56:41
trellix
trellix
The Bug Report – August 2023 Edition
2023-09-06 00:00:00
The Bug Report – August 2023 Edition
2023-09-06 00:00:00
hp
hp
Intel 2023.3 IPU – BIOS August 2023 Security Updates
2023-08-08 00:00:00
centos
centos
bpftool, kernel, perf, python security update
2024-01-12 19:36:38

CVSS3

6.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

EPSS

0.001

Percentile

35.3%

JSON
Related for OSV:CVE-2022-40982
oraclelinux8prion1nessus61openvas45cve1ubuntucve1alpinelinux1debian5talosblog1cvelist1ics1f51vulnrichment1cloudlinux1veracode1nvd1amazon1debiancve1osv22xen1redhatcve1fedora4chrome1redhat7rocky2citrix1cloudfoundry1ubuntu17thn2mageia3trellix2hp1centos1